Skip to content

Commit

Permalink
Switch to go builder 1.23.1 and improve docker scout score. (#11938)
Browse files Browse the repository at this point in the history
Switch to go builder 1.23.1, 
introduce docker provenance attest and SBOM.
Which should expectedly increase docker image score to A.
  • Loading branch information
lystopad authored Sep 10, 2024
1 parent f3f1e67 commit d599dc8
Showing 1 changed file with 3 additions and 1 deletion.
4 changes: 3 additions & 1 deletion .github/workflows/ci-cd-main-branch-docker-images.yml
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ run-name: "Commit id ${{ github.sha }}: CI-CD build and deploy docker images bas

env:
APPLICATION: "erigon"
BUILDER_IMAGE: "golang:1.22.7-alpine3.20"
BUILDER_IMAGE: "golang:1.23.1-alpine3.20"
TARGET_BASE_IMAGE: "alpine:3.20.3"
APP_REPO: "erigontech/erigon"
CHECKOUT_REF: "main"
Expand Down Expand Up @@ -63,6 +63,8 @@ jobs:
docker buildx build \
--file ${{ env.DOCKERFILE_PATH }} \
--target ci-cd-main-branch \
--attest type=provenance,mode=max \
--sbom=true \
--build-arg CI_CD_MAIN_TARGET_BASE_IMAGE=${{ env.TARGET_BASE_IMAGE }} \
--build-arg CI_CD_MAIN_BUILDER_IMAGE=${{ env.BUILDER_IMAGE }} \
--tag ${{ env.DOCKER_URL }}:${{ env.BUILD_VERSION }} \
Expand Down

0 comments on commit d599dc8

Please sign in to comment.